syzbot


INFO: rcu detected stall in kswapd

Status: public: reported C repro on 2019/04/14 08:51
Reported-by: syzbot+3533b7943a5e2a12807f@syzkaller.appspotmail.com
First crash: 1910d, last: 1617d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in kswapd kernel 1 1970d 1970d 0/26 auto-closed as invalid on 2019/05/04 06:35

Sample crash report:
lowmemorykiller: Killing 'syz-executor903' (2349) (tgid 2349), adj 1000,
   to free 9976kB on behalf of 'syz-executor903' (9270) because
   cache 1140kB is below limit 65536kB for oom_score_adj 12
   Free memory is 62276kB above reserved
INFO: rcu_preempt detected stalls on CPUs/tasks:
	Tasks blocked on level-0 rcu_node (CPUs 0-1): P33
	(detected by 0, t=10503 jiffies, g=1202, c=1201, q=99050)
kswapd0         R  running task    28288    33      2 0x80000008
 ffff8801db607c60 ffffffff813fa6fd ffffffff813fa504 ffff8801d8408000
 ffffffff830cd6c0 0000000000000096 ffff8801d84083e0 dffffc0000000000
 ffff8801db607c98 ffffffff81404e39 00000000000004b1 00000000000182ea
Call Trace:
 <IRQ> 
 [<ffffffff813fa6fd>] sched_show_task.cold.35+0x279/0x31f kernel/sched/core.c:5317
 [<ffffffff81404e39>] rcu_print_detail_task_stall_rnp+0xc2/0xfe kernel/rcu/tree_plugin.h:530
 [<ffffffff81405f5f>] rcu_print_detail_task_stall kernel/rcu/tree_plugin.h:543 [inline]
 [<ffffffff81405f5f>] print_other_cpu_stall kernel/rcu/tree.c:1408 [inline]
 [<ffffffff81405f5f>] check_cpu_stall kernel/rcu/tree.c:1520 [inline]
 [<ffffffff81405f5f>] __rcu_pending kernel/rcu/tree.c:3487 [inline]
 [<ffffffff81405f5f>] rcu_pending kernel/rcu/tree.c:3551 [inline]
 [<ffffffff81405f5f>] rcu_check_callbacks.cold.69+0x757/0xd27 kernel/rcu/tree.c:2880
 [<ffffffff81267470>] update_process_times+0x30/0x70 kernel/time/timer.c:1629
 [<ffffffff8129641a>] tick_sched_handle.isra.5+0x4a/0xf0 kernel/time/tick-sched.c:151
 [<ffffffff81296536>] tick_sched_timer+0x76/0x130 kernel/time/tick-sched.c:1190
 [<ffffffff8126a197>] __run_hrtimer kernel/time/hrtimer.c:1255 [inline]
 [<ffffffff8126a197>] __hrtimer_run_queues+0x357/0xe30 kernel/time/hrtimer.c:1319
 [<ffffffff8126c681>] hrtimer_interrupt+0x1b1/0x430 kernel/time/hrtimer.c:1353
 [<ffffffff810912d4>] local_apic_timer_interrupt+0x74/0xa0 arch/x86/kernel/apic/apic.c:937
 [<ffffffff8281b76c>] smp_apic_timer_interrupt+0x7c/0xb0 arch/x86/kernel/apic/apic.c:961
 [<ffffffff8281902d>] apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> 
 [<ffffffff82818214>] retint_kernel+0x1b/0x2d
 [<ffffffff812270c8>] vprintk_emit+0x448/0x790 kernel/printk/printk.c:1908
 [<ffffffff81227438>] vprintk+0x28/0x30 kernel/printk/printk.c:1918
 [<ffffffff8122745d>] vprintk_default+0x1d/0x30 kernel/printk/printk.c:1919
 [<ffffffff81402f9f>] vprintk_func kernel/printk/internal.h:36 [inline]
 [<ffffffff81402f9f>] printk+0xaf/0xd7 kernel/printk/printk.c:1980
 [<ffffffff8222d9e8>] lowmem_scan.cold.1+0x1f9/0x35b drivers/staging/android/lowmemorykiller.c:177
 [<ffffffff81449cc6>] do_shrink_slab mm/vmscan.c:398 [inline]
 [<ffffffff81449cc6>] shrink_slab.part.8+0x3c6/0xa00 mm/vmscan.c:501
 [<ffffffff814557fd>] shrink_slab mm/vmscan.c:465 [inline]
 [<ffffffff814557fd>] shrink_node+0x1ed/0x740 mm/vmscan.c:2602
 [<ffffffff814570b9>] kswapd_shrink_node mm/vmscan.c:3202 [inline]
 [<ffffffff814570b9>] balance_pgdat mm/vmscan.c:3319 [inline]
 [<ffffffff814570b9>] kswapd+0x7e9/0x13b0 mm/vmscan.c:3512
 [<ffffffff81142c3d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
kswapd0         R  running task    28288    33      2 0x80000008
 ffff8801db607c60 ffffffff813fa6fd ffffffff813fa504 ffff8801d8408000
 ffffffff830cd6c0 0000000000000096 ffff8801d84083e0 dffffc0000000000
 ffff8801db607c98 ffffffff81404e39 ffffffff830cda40 00000000000182ea
Call Trace:
 <IRQ> 
 [<ffffffff813fa6fd>] sched_show_task.cold.35+0x279/0x31f kernel/sched/core.c:5317
 [<ffffffff81404e39>] rcu_print_detail_task_stall_rnp+0xc2/0xfe kernel/rcu/tree_plugin.h:530
 [<ffffffff81405fb7>] rcu_print_detail_task_stall kernel/rcu/tree_plugin.h:545 [inline]
 [<ffffffff81405fb7>] print_other_cpu_stall kernel/rcu/tree.c:1408 [inline]
 [<ffffffff81405fb7>] check_cpu_stall kernel/rcu/tree.c:1520 [inline]
 [<ffffffff81405fb7>] __rcu_pending kernel/rcu/tree.c:3487 [inline]
 [<ffffffff81405fb7>] rcu_pending kernel/rcu/tree.c:3551 [inline]
 [<ffffffff81405fb7>] rcu_check_callbacks.cold.69+0x7af/0xd27 kernel/rcu/tree.c:2880
 [<ffffffff81267470>] update_process_times+0x30/0x70 kernel/time/timer.c:1629
 [<ffffffff8129641a>] tick_sched_handle.isra.5+0x4a/0xf0 kernel/time/tick-sched.c:151
 [<ffffffff81296536>] tick_sched_timer+0x76/0x130 kernel/time/tick-sched.c:1190
 [<ffffffff8126a197>] __run_hrtimer kernel/time/hrtimer.c:1255 [inline]
 [<ffffffff8126a197>] __hrtimer_run_queues+0x357/0xe30 kernel/time/hrtimer.c:1319
 [<ffffffff8126c681>] hrtimer_interrupt+0x1b1/0x430 kernel/time/hrtimer.c:1353
 [<ffffffff810912d4>] local_apic_timer_interrupt+0x74/0xa0 arch/x86/kernel/apic/apic.c:937
 [<ffffffff8281b76c>] smp_apic_timer_interrupt+0x7c/0xb0 arch/x86/kernel/apic/apic.c:961
 [<ffffffff8281902d>] apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> 
 [<ffffffff82818214>] retint_kernel+0x1b/0x2d
 [<ffffffff812270c8>] vprintk_emit+0x448/0x790 kernel/printk/printk.c:1908
 [<ffffffff81227438>] vprintk+0x28/0x30 kernel/printk/printk.c:1918
 [<ffffffff8122745d>] vprintk_default+0x1d/0x30 kernel/printk/printk.c:1919
 [<ffffffff81402f9f>] vprintk_func kernel/printk/internal.h:36 [inline]
 [<ffffffff81402f9f>] printk+0xaf/0xd7 kernel/printk/printk.c:1980
 [<ffffffff8222d9e8>] lowmem_scan.cold.1+0x1f9/0x35b drivers/staging/android/lowmemorykiller.c:177
 [<ffffffff81449cc6>] do_shrink_slab mm/vmscan.c:398 [inline]
 [<ffffffff81449cc6>] shrink_slab.part.8+0x3c6/0xa00 mm/vmscan.c:501
 [<ffffffff814557fd>] shrink_slab mm/vmscan.c:465 [inline]
 [<ffffffff814557fd>] shrink_node+0x1ed/0x740 mm/vmscan.c:2602
 [<ffffffff814570b9>] kswapd_shrink_node mm/vmscan.c:3202 [inline]
 [<ffffffff814570b9>] balance_pgdat mm/vmscan.c:3319 [inline]
 [<ffffffff814570b9>] kswapd+0x7e9/0x13b0 mm/vmscan.c:3512
 [<ffffffff81142c3d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
lowmemorykiller: Killing 'syz-executor903' (9303) (tgid 9303), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9327) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9304) (tgid 9304), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9335) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9306) (tgid 9306), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9330) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9295) (tgid 9295), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9339) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9317) (tgid 9317), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9339) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -4132kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9307) (tgid 9307), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9334) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9310) (tgid 9310), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9342) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9321) (tgid 9321), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9334) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is 768kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9313) (tgid 9313), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9327) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13508kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9286) (tgid 9286), adj 1000,
   to free 12152kB on behalf of 'syz-executor903' (9334) because
   cache 1140kB is below limit 16384kB for oom_score_adj 6
   Free memory is 11420kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9292) (tgid 9292), adj 1000,
   to free 12024kB on behalf of 'syz-executor903' (9339) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -4132kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9322) (tgid 9322), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9335) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13108kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9313) (tgid 9313), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9330) because
   cache 1140kB is below limit 6144kB for oom_score_adj 0
   Free memory is -10308kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9327) (tgid 9326), adj 1000,
   to free 10172kB on behalf of 'syz-executor903' (9334) because
   cache 1140kB is below limit 65536kB for oom_score_adj 12
   Free memory is 19516kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9325) (tgid 9325), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9342) because
   cache 1140kB is below limit 16384kB for oom_score_adj 6
   Free memory is 11644kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9289) (tgid 9289), adj 1000,
   to free 12148kB on behalf of 'syz-executor903' (9327) because
   cache 1140kB is below limit 65536kB for oom_score_adj 12
   Free memory is 19516kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9361) (tgid 9361), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9391) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13264kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9365) (tgid 9365), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9385) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -11164kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9363) (tgid 9363), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9399) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -10264kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9371) (tgid 9371), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9391) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -9668kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9369) (tgid 9369), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9399) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -9668kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9383) (tgid 9383), adj 1000,
   to free 11280kB on behalf of 'syz-executor903' (9394) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13264kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9346) (tgid 9346), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9397) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13264kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9328) (tgid 9328), adj 1000,
   to free 10372kB on behalf of 'syz-executor903' (9397) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is 3812kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9378) (tgid 9378), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9388) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -9668kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4348) (tgid 4348), adj 1000,
   to free 9968kB on behalf of 'syz-executor903' (9388) because
   cache 904kB is below limit 16384kB for oom_score_adj 6
   Free memory is 10812kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9377) (tgid 9377), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9385) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -9668kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4348) (tgid 4348), adj 1000,
   to free 9968kB on behalf of 'syz-executor903' (9399) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is -3268kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4348) (tgid 4348), adj 1000,
   to free 9968kB on behalf of 'syz-executor903' (9394) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is 3812kB above reserved
lowmemorykiller: Killing 'syz-executor903' (3273) (tgid 3273), adj 1000,
   to free 9964kB on behalf of 'syz-executor903' (9399) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 19596kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4924) (tgid 4924), adj 1000,
   to free 9964kB on behalf of 'syz-executor903' (9394) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 27396kB above reserved
lowmemorykiller: Killing 'syz-executor903' (3273) (tgid 3273), adj 1000,
   to free 9964kB on behalf of 'syz-executor903' (9397) because
   cache 904kB is below limit 6144kB for oom_score_adj 0
   Free memory is 4012kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4422) (tgid 4422), adj 1000,
   to free 9960kB on behalf of 'syz-executor903' (9385) because
   cache 904kB is below limit 16384kB for oom_score_adj 6
   Free memory is 10812kB above reserved
lowmemorykiller: Killing 'syz-executor903' (7899) (tgid 7899), adj 1000,
   to free 9956kB on behalf of 'syz-executor903' (9391) because
   cache 904kB is below limit 16384kB for oom_score_adj 6
   Free memory is 10812kB above reserved
lowmemorykiller: Killing 'syz-executor903' (8111) (tgid 8111), adj 1000,
   to free 9964kB on behalf of 'syz-executor903' (9388) because
   cache 904kB is below limit 16384kB for oom_score_adj 6
   Free memory is 10812kB above reserved
lowmemorykiller: Killing 'syz-executor903' (5364) (tgid 5364), adj 1000,
   to free 9952kB on behalf of 'syz-executor903' (9388) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 58600kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4924) (tgid 4924), adj 1000,
   to free 9964kB on behalf of 'syz-executor903' (9399) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 27996kB above reserved
lowmemorykiller: Killing 'syz-executor903' (7561) (tgid 7561), adj 1000,
   to free 9952kB on behalf of 'syz-executor903' (9385) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 44500kB above reserved
lowmemorykiller: Killing 'syz-executor903' (2763) (tgid 2763), adj 1000,
   to free 9944kB on behalf of 'syz-executor903' (9391) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 44500kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4422) (tgid 4422), adj 1000,
   to free 9960kB on behalf of 'syz-executor903' (9394) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 35204kB above reserved
lowmemorykiller: Killing 'syz-executor903' (4422) (tgid 4422), adj 1000,
   to free 9960kB on behalf of 'syz-executor903' (9397) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 35204kB above reserved
lowmemorykiller: Killing 'syz-executor903' (2763) (tgid 2763), adj 1000,
   to free 9944kB on behalf of 'syz-executor903' (9388) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 60300kB above reserved
lowmemorykiller: Killing 'syz-executor903' (7561) (tgid 7561), adj 1000,
   to free 9952kB on behalf of 'syz-executor903' (9399) because
   cache 904kB is below limit 65536kB for oom_score_adj 12
   Free memory is 63076kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9412) (tgid 9412), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9461) because
   cache 784kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13432kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9413) (tgid 9413), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9449) because
   cache 784kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13432kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9439) (tgid 9439), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9452) because
   cache 784kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13432kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9441) (tgid 9441), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9461) because
   cache 784kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13432kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9414) (tgid 9414), adj 1000,
   to free 12156kB on behalf of 'syz-executor903' (9449) because
   cache 784kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13432kB above reserved
lowmemorykiller: Killing 'syz-executor903' (9417) (tgid 9417), adj 1000,
   to free 12152kB on behalf of 'syz-executor903' (9452) because
   cache 784kB is below limit 6144kB for oom_score_adj 0
   Free memory is -13432kB above reserved

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/24 05:50 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 b602d64b .config console log report syz C ci-android-49-kasan-gce
2019/09/26 10:59 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 24d405a3 .config console log report syz C ci-android-49-kasan-gce
2019/09/08 18:53 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a60cb4cd .config console log report syz C ci-android-49-kasan-gce
2019/03/03 01:49 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 1c0e457a .config console log report syz C ci-android-49-kasan-gce
2019/01/04 05:39 https://android.googlesource.com/kernel/common android-4.9 043c92bd0517 7da23925 .config console log report syz C ci-android-49-kasan-gce-root
2019/09/27 23:04 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d8074e0b .config console log report syz C ci-android-49-kasan-gce-386
2019/09/08 19:20 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a60cb4cd .config console log report syz C ci-android-49-kasan-gce-386
2019/08/23 07:25 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ca6f3cfa .config console log report syz C ci-android-49-kasan-gce-386
2019/06/04 14:17 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 e41a20c5 .config console log report syz C ci-android-49-kasan-gce-386
2019/10/17 20:13 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 8c88c9c1 .config console log report ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.